I have two DC, one is a Windows Server 2003 (certificate server), the other is Windows Server 2008 R2. The Windows Server 2008 R2 has the following events in the event viewer.

Source: Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Event ID: 6
Automatic certificate enrollment for local system failed (0x800706ba) The RPC server is unavailable.

And

Source: Microsoft-Windows-CertificateServicesClient-CertEnroll
Event ID: 13
Certificate enrollment for Local system failed to enroll for a DomainController certificate with request ID N/A from 2003DCinternal.domain.com\DOMAIN-Root-CA.domain.com (The RPC server is unavailable. 0x800706ba (WIN32: 1722)).

I've read a few things over the internet: Certificate enrollment for Local system failed to enroll Event ID:13 Seems to indicate that I should check if I already have a certificate installed. I open the Certificates MMC Snap-in on the 2008 R2 server having the errors and go to Personal > Certificates. From there I see a certificate for localhost issued by localhost (could that indicate a part of my problem?).

I've also seen other stuff indicating that 2003 servers can not generate the correct certificates for 2003 or Windows 7 computers.

Other than that Google doesn't really have any thing that solidly explains what the issue is.

Could someone help me understand how to troubleshoot this?

  • Is there a firewall between the two machines? – Ryan Ries Mar 15 '13 at 16:32
  • @RyanRies There is not – Nixphoe Mar 15 '13 at 16:39

You might find the following link useful as a troubleshooting reference http://blogs.technet.com/b/askds/archive/2007/11/06/how-to-troubleshoot-certificate-enrollment-in-the-mmc-certificate-snap-in.aspx .

Incidentally, the self signed cert issued by localhost is not the problem.

Personally, I'd take a network trace from the 2008 R2 DC while manually trying to enrol for a cert using the MMC from the 2008R2 DC and see how far you get.

Your Answer

 

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.